Senior Security Engineer, Detection & Response

Flexport is a global trade company. The Senior Security Engineer, Detection & Response role involves owning detections end to end, building and tuning detections, incident response, and automation. The team is global with follow-the-sun pager rotation.

• Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, and shipped through CI/CD
• Track detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect
• Own incident response: triage, contain, remediate, and write the retrospective
• Build automation that removes toil from investigations
• Define telemetry requirements for new systems before they ship
• Threat hunt proactively across the estate

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting
• Proficiency in at least one programming language (Python, Go, or similar)
• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar)
• Practical incident response experience: you've led or played a major role in triaging and closing out real security incidents

• You own your detections end to end, no MSSP, no tier-1 queue
• The consequences here are physical
• You'll inherit a real, established estate with legacy telemetry gaps to close
• We have the latest hardware and software, including frontier AI models on day one
• Relocation support is available
• Base salary plus bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off